DEBIAN-CVE-2020-10696

DEBIAN-CVE-2020-10696 PUBLISHED CVSS 8.800000190734863 HIGH

A path traversal flaw was found in Buildah in versions before 1.14.5. This flaw allows an attacker to trick a user into building a malicious container image hosted on an HTTP(s) server and then write files to the user's system anywhere that the user has permissions.

Risk Scores

CVSS 3.1

8.800000190734863

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Affected Products

Vendor	Product	Versions
Debian:12	golang-github-containers-buildah	0, 0, 0
Debian:14	golang-github-containers-buildah	0, 0, 0
Debian:11	golang-github-containers-buildah	0, 0, 0
Debian:13	golang-github-containers-buildah	0, 0, 0

Timeline

Mar 31, 2020 CVE Published
Apr 28, 2026 CVE Updated

References

https://security-tracker.debian.org/tracker/CVE-2020-10696 advisory

Open in Interactive Console →